From 3da20b3797b6d29d78197c16f4daac8fed6db895 Mon Sep 17 00:00:00 2001 From: friendica Date: Thu, 24 Oct 2013 18:34:55 -0700 Subject: directory leaking hidden channels - logic issue --- mod/dirsearch.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'mod/dirsearch.php') diff --git a/mod/dirsearch.php b/mod/dirsearch.php index 3506178ea..115bc2235 100644 --- a/mod/dirsearch.php +++ b/mod/dirsearch.php @@ -159,10 +159,12 @@ function dirsearch_content(&$a) { json_return_and_die($spkt); } else { - $r = q("SELECT xchan.*, xprof.* from xchan left join xprof on xchan_hash = xprof_hash where $logic $sql_extra and not ( xchan_flags & %d ) and not ( xchan_flags & %d ) $safesql $order $qlimit ", + + $r = q("SELECT xchan.*, xprof.* from xchan left join xprof on xchan_hash = xprof_hash where ( $logic $sql_extra ) and not ( xchan_flags & %d ) and not ( xchan_flags & %d ) $safesql $order $qlimit ", intval(XCHAN_FLAGS_HIDDEN), intval(XCHAN_FLAGS_ORPHAN) ); + } $ret['page'] = $page + 1; -- cgit v1.2.3